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AMENDMENTS TO THE CLAIMS 
The listing of claims below replaces all prior versions, and listings, of claims: 



1 1 . (Currently Amended) A method of routing a data unit targeted to one of a 

2 plurality of entities in a network, comprising: 

3 receiving the data unit, the data unit including security information and 

4 address information , the security information including Internet Security Association and 

5 Key Management Protocol (ISAKMP) information ; and 

6 translating the address information to an address of a target network entity 

7 based on the s e curity ISAKMP information. 

1 2. (Original) The method of claim 1, wherein the address information in the 

2 data unit includes a common address associated with the plurality of network entities, and 
*\J 3 each network entity is assigned a unique network address, and wherein translating the 

Qo 4 address information includes translating the common address to one of the unique 

5 network addresses. 

1 3. (Original) The method of claim 1, wherein receiving the data unit includes 

2 receiving an Internet Protocol packet. 

1 4. (Original) The method of claim 3, wherein translating the address 

2 information includes translating an Internet Protocol destination address. 

1 5.-7. (Cancelled) 

1 8. (Currently Amended) The method of claim 7, wherein translating the 

2 address information includes translating the address information based on initiator and 

3 responder cookies of the Int e rn e t Security Association and K e y Manag e m e nt Protocol 

4 ISAKMP information. 
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1 9. (Currently Amended) The method of claim 1 , further comprising creating 

2 one or more address translation tables used in the translation of address information, the 

3 one or more address translation tables each containing the address of at least one of the 

4 network entities and security ISAKMP information associated with the at least one 

5 network entity. 

1 10. (Currently Amended) The method of claim 9, further comprising matching 

2 the s e curity ISAKMP information in the data unit with the information in the one or more 

3 address translation tables. 

1 11. (Currently Amended) A router for use in a network having one or more 

2 entities, the router comprising: 

3 an interface adapted to receive a data unit, the data unit containing a field 

4 having security information , the security information including Internet Security 

5 Association and Key Management Protocol (ISAKMP) information ; and 

6 a translator adapted to generate an identifier of a network entity that the 

7 data unit is targeted for based on the s e curity ISAKMP information. 

1 12. (Original) The router of claim 1 1, wherein the translator includes a many- 

2 to-one network address translator. 

1 13. (Original) The router of claim 1 1 , wherein the data unit further contains an 

2 address associated with the router. 

1 14. (Original) The router of claim 13, wherein the translator is adapted to 

2 further replace the address with the identifier of the target network entity. 

1 15. (Original) The router of claim 1 1 , wherein the data unit includes an 

2 Internet Protocol packet. 

1 16. (Cancelled) 
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1 17. (Currently Amended) The router of claim 15, wherein the data unit 

2 contains initiator and responder cookies in an Int e rn e t S e curity Association and K e y 

3 Manag e m e nt Protocol ISAKMP header. 

1 18. (Original) The router of claim 1 1 , further comprising a storage medium 

2 storing one or more tables containing routing information accessible by the translator. 

1 19. (Original) The router of claim 1 8, wherein the routing information 

2 includes security information and a corresponding identifier of a network entity. 

1 20. (Currently Amended) An article including one or more machine-readable 

2 storage media containing instructions for routing a data unit targeted to an entity on a 

3 network, the instructions when executed causing a system to: 

4 receive the data unit, the data unit containing security information to 

5 provide secure communications of the data unit , the security information including 

6 Internet Security Association and Key Management Protocol (ISAKMP) information ; 

7 and 

8 determine an address of the network entity based on the s e curity ISAKMP 

9 information. 

1 21. (Currently Amended) The article of claim 20, wherein the one or more 

2 machine-readable storage media contain instructions that when executed causes the 

3 system to translate an address in the data unit to the address of the network entity based 

4 on the s e curity ISAKMP information. 

1 22. (Cancelled) 

1 23. (Cancelled) 
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1 24. (Currently Amended) The article of claim 20, wherein the one or more 

2 machine-readable storage media contain instructions that when executed causes the 

3 system to access an address translation table to match the s e curity ISAKMP information 

4 in the data unit to information in the address translation table. 

1 25. (Currently Amended) The article of claim 24, wherein the one or more 

2 machine-readable storage media contain instructions that when executed causes the 

3 system to match address and security ISAKMP information in the data unit with address 

4 and s e curity ISAKMP information in the address translation table. 

1 26. (Currently Amended) A data signal embodied in a carrier wave 

*\J 2 comprising one or more code segments containing instructions for routing a data unit to 

3 one of a plurality of network entities, the instructions when executed causing a system to: 

4 receive the data unit having security information and a destination address^ 

5 the security information including Internet Security Association and Key Management 

6 Protocol (ISAKMP) information ; 

7 access one or more translation tables each containing s e curity ISAKMP ' 

8 information and an address of a network entity; and 

9 convert the destination address of the data unit to the network entity 

1 0 address based on the ISAKMP information and the address in the one or more translation 

11 tables . 

1 27. (Currently Amended) A storage medium containing a data structure 

2 accessible by a system for routing a data unit to an entity in a network, the data unit 

3 containing a first destination address and the network entity having a second address, the 

4 data structure comprising the first destination address, the second address, and security 

5 Internet Security Association and Key Management Protocol (ISAKMP) information 

6 useable by the system to match the first destination address to the second address based 

7 on the s e curity ISAKMP information. 
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1 28. (Currently Amended) A communications network, comprising: 

2 a first network including a plurality of entities and a router, the router 

3 including a network address translator; and 

4 a node capable of communicating data units with entities in the first 

5 network, each data unit including security Internet Security Association and Key 

6 Management Protocol (ISAKMP) information, 

7 the network address translator adapted to convert a destination address in a 

8 received data unit from the node to an address of one of the entities based on the s e curity 
c\J 9 ISAKMP information in the received data unit. 



1 29. - 34. (Cancelled) 

1 35. (New) The router of claim 17, wherein the translator is adapted to generate 

2 the identifier of the network entity based on the initiator and responder cookies in the 

3 ISAKMP header. 

1 36. (New) The article of claim 2 1 , wherein the data unit contains an ISAKMP 

2 header having initiator and responder cookies, wherein translating the address in the data 

3 unit comprises translating the address based on the initiator and responder cookies in the 

4 ISAKMP header. 
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